{"schemaVersion":3,"id":"CVE-2024-31079","aliases":["ALPINE-CVE-2024-31079","DEBIAN-CVE-2024-31079","CGA-228c-g6wm-jx4j","CGA-24cf-wq49-pxhp","CGA-2x5x-5pqw-mg4h","CGA-4ffw-v8ph-jrp5","CGA-4vvm-q74p-8qcg","CGA-68m6-2x5q-fgwg","CGA-6ghh-vprw-4wfh","CGA-6mf2-gpw2-gpqr","CGA-6rx6-5wqg-wrg8","CGA-7h4h-jjh2-6fwf","CGA-8g29-cwx3-269j","CGA-8p46-gqcw-m5pp","CGA-8w24-vc47-4vgv","CGA-983f-hrvg-5j6m","CGA-998h-pxp6-q8mm","CGA-9mmw-5jjp-rh3p","CGA-ccp5-w5vh-php9","CGA-cmvh-w523-vhm9","CGA-cvjr-45gx-gq54","CGA-fx5m-7x98-ghqm","CGA-fxpg-m8ff-gp47","CGA-gpr9-mg78-95jv","CGA-jf62-5x56-j6j2","CGA-jj28-pmf4-p5mv","CGA-m3qp-jrr3-vjwq","CGA-mhfg-hmrx-7vcw","CGA-pv9q-2464-8v8g","CGA-q3rq-4252-7mjj","CGA-vfgr-4qg8-rccr","CGA-vrw6-2jm7-38cm"],"status":"published","duplicateOf":null,"title":null,"description":"When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate or cause other potential impact. This attack requires that a request be specifically timed during the connection draining process, which the attacker has no visibility and limited influence over.","dates":{"published":"2024-05-29T16:02:04.620Z","modified":"2025-02-13T17:47:50.656Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.8,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","exploitability":5.6,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","exploitability":5.6,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","exploitability":5.6,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","exploitability":5.6,"impact":4.2,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00888,"percentile":0.58656,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00888},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00888,"percentile":0.58656}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00888,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00888,"percentile":0.58656}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-121","name":"Stack-based Buffer Overflow","description":"A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/121.html"},{"id":"CWE-787","name":"Out-of-bounds Write","description":"The product writes data past the end, or before the beginning, of the intended buffer.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/787.html"}],"affected":[{"vendor":"alpine","product":"nginx","name":"nginx","label":"nginx","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/nginx","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline","name":"nginx-mainline","label":"nginx-mainline","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-config","name":"nginx-mainline-config","label":"nginx-mainline-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-config-compat","name":"nginx-mainline-config-compat","label":"nginx-mainline-config-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-config-compat","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-http_geoip","name":"nginx-mainline-mod-http_geoip","label":"nginx-mainline-mod-http_geoip","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-http_geoip","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-http_image_filter","name":"nginx-mainline-mod-http_image_filter","label":"nginx-mainline-mod-http_image_filter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-http_image_filter","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-http_perl","name":"nginx-mainline-mod-http_perl","label":"nginx-mainline-mod-http_perl","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-http_perl","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-http_xslt_filter","name":"nginx-mainline-mod-http_xslt_filter","label":"nginx-mainline-mod-http_xslt_filter","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-http_xslt_filter","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-mail","name":"nginx-mainline-mod-mail","label":"nginx-mainline-mod-mail","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-mail","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-stream","name":"nginx-mainline-mod-stream","label":"nginx-mainline-mod-stream","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-stream","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-mod-stream_geoip","name":"nginx-mainline-mod-stream_geoip","label":"nginx-mainline-mod-stream_geoip","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-mod-stream_geoip","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-openrc","name":"nginx-mainline-openrc","label":"nginx-mainline-openrc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-openrc","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-package-config","name":"nginx-mainline-package-config","label":"nginx-mainline-package-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-package-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-src","name":"nginx-mainline-src","label":"nginx-mainline-src","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-src","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-mainline-syslog-config","name":"nginx-mainline-syslog-config","label":"nginx-mainline-syslog-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-mainline-syslog-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nginx-stable","name":"nginx-stable","label":"nginx-stable","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nginx-stable","purlType":"apk","versions":[{"text":"< 1.26.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.26.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline","name":"nginx-mainline","label":"nginx-mainline","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-config","name":"nginx-mainline-config","label":"nginx-mainline-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-config-compat","name":"nginx-mainline-config-compat","label":"nginx-mainline-config-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-config-compat","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-http_geoip","name":"nginx-mainline-mod-http_geoip","label":"nginx-mainline-mod-http_geoip","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-http_geoip","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-http_image_filter","name":"nginx-mainline-mod-http_image_filter","label":"nginx-mainline-mod-http_image_filter","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-http_image_filter","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-http_perl","name":"nginx-mainline-mod-http_perl","label":"nginx-mainline-mod-http_perl","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-http_perl","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-http_xslt_filter","name":"nginx-mainline-mod-http_xslt_filter","label":"nginx-mainline-mod-http_xslt_filter","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-http_xslt_filter","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-mail","name":"nginx-mainline-mod-mail","label":"nginx-mainline-mod-mail","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-mail","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-stream","name":"nginx-mainline-mod-stream","label":"nginx-mainline-mod-stream","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-stream","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-mod-stream_geoip","name":"nginx-mainline-mod-stream_geoip","label":"nginx-mainline-mod-stream_geoip","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-mod-stream_geoip","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-openrc","name":"nginx-mainline-openrc","label":"nginx-mainline-openrc","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-openrc","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-package-config","name":"nginx-mainline-package-config","label":"nginx-mainline-package-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-package-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-src","name":"nginx-mainline-src","label":"nginx-mainline-src","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-src","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-mainline-syslog-config","name":"nginx-mainline-syslog-config","label":"nginx-mainline-syslog-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-mainline-syslog-config","purlType":"apk","versions":[{"text":"< 1.27.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.27.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nginx-stable","name":"nginx-stable","label":"nginx-stable","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nginx-stable","purlType":"apk","versions":[{"text":"< 1.26.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.26.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"nginx","name":"nginx","label":"nginx","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/nginx","purlType":"deb","versions":[{"text":"< 1.26.0-2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.26.0-2","eol":null,"hubHref":null},{"vendor":"f5","product":"nginx open source","name":"NGINX Open Source","label":"nginx open source","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.25.0, < 1.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.25.0, < 1.26.1","eol":null,"hubHref":"/vendor/f5/nginx_open_source"},{"vendor":"f5","product":"nginx plus","name":"NGINX Plus","label":"nginx plus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ R30, < R32","noFixRecorded":false,"fixedIn":null},{"text":"r30","noFixRecorded":false,"fixedIn":null},{"text":"r30:p1","noFixRecorded":false,"fixedIn":null},{"text":"r30:p2","noFixRecorded":false,"fixedIn":null},{"text":"r31","noFixRecorded":false,"fixedIn":null},{"text":"r31:p1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ R30, < R32 | r30 | r30:p1 | r30:p2 | r31 | r31:p1","eol":null,"hubHref":"/vendor/f5/nginx_plus"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"39","noFixRecorded":false,"fixedIn":null},{"text":"40","noFixRecorded":false,"fixedIn":null}],"versionsText":"39 | 40","eol":{"isEol":true,"eolDate":"2024-11-26T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"39","label":"39","eolFrom":"2024-11-26T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"}],"affectedCount":35,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://my.f5.com/manage/s/article/K000139611","label":"my.f5.com/manage/s/article/K000139611","hostname":"my.f5.com","tags":["Vendor Advisory","Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R7RPLWC35WHEUFCGKNFG62ESNID25TEZ/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Advisory","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/05/30/4","label":"www.openwall.com/lists/oss-security/2024/05/30/4","hostname":"www.openwall.com","tags":["ARTICLE","Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MLAOKJWDALQZBIV3WKGPJ6T5Z56D3PRD/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Advisory","Third Party Advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-31079","label":"security.alpinelinux.org/vuln/CVE-2024-31079","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-31079","label":"security-tracker.debian.org/tracker/CVE-2024-31079","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-25M2-VQ93-MCQF","CGA-4G39-5RFR-6MXQ","CGA-892F-833W-GF4W","CGA-GC4X-VH8G-V8J3","CGA-GWR9-5996-V24G","CGA-QXX7-JWMF-H3G7","CGA-WQ6G-R44G-X375"]},"timeline":[{"kind":"published","date":"2024-05-29T16:02:04.620Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-02-13T17:47:50.656Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":19,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T16:40:33.715Z","stale":false,"partial":false}}